
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/437d3c38-c370-4afe-a444-07ee5ee1ed9f.roa
File: 437d3c38-c370-4afe-a444-07ee5ee1ed9f.roa (raw, json)
Hash identifier: gedGljhVbVLhFX8D7AkDRQs5bexgSxy1l1ORCPxb6tY=
Subject key identifier: 64:1F:53:BB:F5:24:EE:D1:45:9C:0D:04:B5:A5:08:56:AB:B2:FA:37
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4A6A1F6E946FB37C4AB2D6E1A1DDF997FFDBF328
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/437d3c38-c370-4afe-a444-07ee5ee1ed9f.roa
Signing time: Tue 10 Feb 2026 00:30:42 +0000
ROA not before: Tue 10 Feb 2026 00:30:42 +0000
ROA not after: Mon 11 May 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff1:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Feb 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:6a:1f:6e:94:6f:b3:7c:4a:b2:d6:e1:a1:dd:f9:97:ff:db:f3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 10 00:30:42 2026 GMT
Not After : May 11 23:59:59 2026 GMT
Subject: serialNumber=3a73505e961a5ff7f8346b24a6a7eb8395bc9447c8cdb87239f05d5222b5859a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:cb:a4:73:ac:68:0c:e2:85:82:54:db:d1:
90:17:7c:20:1d:73:83:15:e8:12:eb:4c:18:8f:16:
db:ca:a5:9a:a1:9e:5d:78:41:22:fd:d4:f8:dd:fb:
09:b5:89:5b:9c:02:d9:a1:54:05:24:89:c3:10:fc:
6d:72:9e:e5:80:ab:72:84:aa:49:96:d4:d9:ae:22:
f7:9e:de:25:59:e0:ee:95:ca:a4:cb:cb:7d:6f:d9:
02:0b:73:c8:66:b7:ff:cc:43:3d:02:24:75:12:8a:
1c:8c:8d:79:d9:82:02:89:be:f0:64:7d:7e:df:15:
b7:31:d2:66:69:59:44:8e:d1:db:d5:79:a2:f3:09:
d5:97:00:7c:84:07:b7:db:40:df:2b:71:25:e7:b9:
34:48:c0:20:fe:b9:0d:29:19:f2:80:4a:80:78:5e:
d6:30:f3:6b:35:5e:f1:21:2e:7f:33:02:60:05:c1:
78:3d:c7:0e:03:15:12:48:31:06:97:c9:10:77:f6:
33:59:0a:b3:27:f2:a9:83:59:70:2b:ce:04:f7:5c:
ec:40:df:0c:b4:99:2f:d2:72:42:c7:ce:0c:f7:eb:
2d:eb:d9:cd:03:fb:ec:04:ef:4c:df:5b:19:67:1d:
b7:c4:da:f0:10:12:7f:96:99:30:07:2b:3a:59:30:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1F:53:BB:F5:24:EE:D1:45:9C:0D:04:B5:A5:08:56:AB:B2:FA:37
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/437d3c38-c370-4afe-a444-07ee5ee1ed9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff1:2000::/40
Signature Algorithm: sha256WithRSAEncryption
a2:4b:3f:91:78:e8:19:95:b3:f1:61:e3:32:7d:45:00:92:34:
c1:01:e0:8f:72:84:41:88:80:c6:87:7a:75:3f:8a:ee:16:ba:
8b:be:1a:86:b5:a0:fc:6e:65:1e:ae:8c:dd:39:50:25:16:b8:
ca:55:b2:a0:f0:d8:d6:23:12:5a:c4:70:67:56:50:9d:fd:af:
bc:f8:99:15:2a:0f:3a:ec:a0:7a:ba:95:cd:a2:42:03:49:59:
be:bb:5a:06:81:ad:9f:a8:6a:b0:68:ab:c6:e3:10:7a:5c:8e:
cf:36:1a:55:9e:f2:9b:db:98:74:3e:50:af:a2:b5:05:b9:40:
5d:66:09:51:6e:98:c8:36:16:11:96:52:58:ee:59:75:d0:3f:
cc:d5:2f:33:34:fc:e0:91:74:17:cb:64:3a:4e:d6:72:13:e9:
29:b1:c7:df:4d:ff:46:a2:1c:7a:1d:46:6a:15:f1:11:93:93:
b5:30:75:4d:c5:06:a6:13:c3:97:11:d1:2d:cd:d3:4d:56:75:
02:23:b8:5a:3f:3b:48:d2:8d:79:2b:4f:50:97:48:f6:00:fe:
74:b6:1f:a8:a7:1f:24:4d:68:16:ce:d4:bb:06:c9:70:4c:db:
40:53:d7:d7:4f:92:95:08:0c:3c:b5:10:be:50:82:00:16:5e:
a2:4c:07:b8
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUSmofbpRvs3xKstbhod35l//b8ygwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDAzMDQyWhcNMjYwNTExMjM1OTU5
WjB6MUkwRwYDVQQFE0AzYTczNTA1ZTk2MWE1ZmY3ZjgzNDZiMjRhNmE3ZWI4Mzk1
YmM5NDQ3YzhjZGI4NzIzOWYwNWQ1MjIyYjU4NTlhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoJ8ukc6xoDOKFglTb0ZAXfCAdc4MV6BLrTBiPFtvKpZqh
nl14QSL91Pjd+wm1iVucAtmhVAUkicMQ/G1ynuWAq3KEqkmW1NmuIvee3iVZ4O6V
yqTLy31v2QILc8hmt//MQz0CJHUSihyMjXnZggKJvvBkfX7fFbcx0mZpWUSO0dvV
eaLzCdWXAHyEB7fbQN8rcSXnuTRIwCD+uQ0pGfKASoB4XtYw82s1XvEhLn8zAmAF
wXg9xw4DFRJIMQaXyRB39jNZCrMn8qmDWXArzgT3XOxA3wy0mS/SckLHzgz36y3r
2c0D++wE70zfWxlnHbfE2vAQEn+WmTAHKzpZMBe3AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUZB9Tu/Uk7tFFnA0EtaUIVquy+jcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQzN2QzYzM4LWMzNzAtNGFmZS1hNDQ0LTA3ZWU1ZWUxZWQ5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/xIDANBgkqhkiG9w0BAQsFAAOCAQEAoks/kXjoGZWz8WHjMn1FAJI0
wQHgj3KEQYiAxod6dT+K7ha6i74ahrWg/G5lHq6M3TlQJRa4ylWyoPDY1iMSWsRw
Z1ZQnf2vvPiZFSoPOuygerqVzaJCA0lZvrtaBoGtn6hqsGirxuMQelyOzzYaVZ7y
m9uYdD5Qr6K1BblAXWYJUW6YyDYWEZZSWO5ZddA/zNUvMzT84JF0F8tkOk7WchPp
KbHH303/RqIceh1GahXxEZOTtTB1TcUGphPDlxHRLc3TTVZ1AiO4Wj87SNKNeStP
UJdI9gD+dLYfqKcfJE1oFs7UuwbJcEzbQFPX10+SlQgMPLUQvlCCABZeokwHuA==
-----END CERTIFICATE-----
Generated at Wed Feb 18 07:31:22 2026 by rpki-client